CVE-2026-12434

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

CVE-2026-12434 List category posts <= 0.95.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attribute

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

CVE-2026-12434

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure up to version 0.95.0 via sanitize_status. An authenticated attacker with contributor-level access or higher can extract titles, full content, excerpts, dates, authors, and custom-field metadata of other u...

EUVD-2026-44856

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

CVE-2026-12434

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

CVE-2026-12434 List category posts <= 0.95.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attribute

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

PT-2026-60421

The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read the titles of other users' private, draft, pending, scheduled and trashed pos...

PT-2026-60398

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitize status. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts...

CVE-2026-12434: Missing Authorization

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitizestatus. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts,...

CVE-2026-46709

creationtimestamp| type| source ---|---|--- 2026-07-15 23:10:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqptrql7f623 2026-07-15 23:11:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116926517721073292...

CVE-2026-55652

creationtimestamp| type| source ---|---|--- 2026-07-15 22:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5txf2q2w 2026-07-15 23:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpt7o5jtk26 2026-07-16 01:04:56+00:00| seen|...

CVE-2026-46421

creationtimestamp| type| source ---|---|--- 2026-07-15 19:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpi7vnsnr2y 2026-07-15 20:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpljcxnfq2e...

CVE-2026-58658

creationtimestamp| type| source ---|---|--- 2026-07-15 19:02:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpfvsyrp42x 2026-07-15 19:26:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqphawfxma22...

CVE-2026-62389

creationtimestamp| type| source ---|---|--- 2026-07-15 19:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpftgvi3n2h 2026-07-15 19:34:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqphpekd522l...

CVE-2026-59258

creationtimestamp| type| source ---|---|--- 2026-07-15 19:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpft7vpqs2g 2026-07-15 19:20:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpgvkcdzl2o...

CVE-2026-62378

creationtimestamp| type| source ---|---|--- 2026-07-15 17:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o 2026-07-15 18:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e 2026-07-15 19:12:44+00:00| seen|...

CVE-2026-42533

creationtimestamp| type| source ---|---|--- 2026-07-15 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp35imbr32a 2026-07-15 16:49:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116925017337379554 2026-07-15 17:32:31+00:00| seen|...

CVE-2026-61736

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zvftsc2w 2026-07-15 16:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3qmrswz2h 2026-07-20 22:35:18+00:00|...

CVE-2026-58077

creationtimestamp| type| source ---|---|--- 2026-07-15 13:25:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqot3gv3km2h 2026-07-15 13:30:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqotd5jryh2m...

CVE-2026-57832

creationtimestamp| type| source ---|---|--- 2026-07-15 13:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqosoptytz22 2026-07-15 13:35:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqotm7l4uw22...